OSINT Toolkit

HomeOSINT Toolkit
+ KNOWMAD OSINT TOOLKIT+ PUBLICLY AVAILABLE INFORMATION ONLY+ OPEN SOURCE INTELLIGENCE+ WASHINGTON D.C.+ KNOWMAD OSINT TOOLKIT+ PUBLICLY AVAILABLE INFORMATION ONLY+ OPEN SOURCE INTELLIGENCE+ WASHINGTON D.C.+ KNOWMAD OSINT TOOLKIT+ PUBLICLY AVAILABLE INFORMATION ONLY
Knowmad OSINT — Curated Toolkit · 2026
OSINT Tools
& Techniques

A curated repository of open-source intelligence tools, assembled from years of operational work across war crimes investigations, geopolitical analysis, corporate intelligence, and investigative journalism. All tools use only Publicly Available Information (PAI).

Categories9 Functions
Tools Listed60+
Source TypePAI Only
Updated2026
No tools match your search.
VerificationVisual Verification, Geolocation & Chronolocation8 tools
Grid-based geolocation assistant for systematically matching image cues against satellite imagery to pinpoint a location.
geolocationBellingcat
Query engine for OpenStreetMap data — search for specific infrastructure, buildings, or landmarks to narrow down geolocation candidates.
OpenStreetMapquery
The baseline reverse image search for finding original sources, misattributed images, and earlier appearances of any photo.
reverse imageverification
Multi-engine reverse image search querying Google, Bing, Yandex, and TinEye simultaneously in one interface.
multi-enginereverse image
Browser plugin that extracts keyframes from videos for reverse searching, retrieves metadata, and checks for manipulation — essential for conflict video authentication.
video verificationkeyframes
Reverse image search focused on exact match detection and first-seen date tracking — useful for identifying recycled imagery passed off as new.
first appearancereverse image
Calculates sun position, shadow direction, and solar azimuth for any location and date/time — the fundamental tool for chronolocation of images and video.
chronolocationshadow analysis
Consistently outperforms Google for Eastern European and CIS-region imagery — indispensable for conflict zone verification and Russia/Ukraine investigations.
reverse imageRussia/CIS
ImageryImagery Exploitation5 tools
Extracts and maps EXIF GPS metadata from uploaded images, instantly revealing where a photo was taken when location data was not stripped.
EXIFGPS
Browser-based EXIF and metadata extractor for images, documents, and video — no installation required.
EXIFmetadata
The industry-standard command-line metadata extraction tool for forensic-grade analysis across images, video, PDF, and Office documents.
CLIforensics
Error Level Analysis tool that visualises compression artefacts to highlight areas that have been digitally manipulated after initial JPEG compression.
ELAmanipulation detection
Facial recognition reverse search engine for finding a face's appearances across the open web — useful for identity verification in conflict imagery.
face recognitionidentity
SatelliteSatellite Imagery & Geospatial Resources9 tools
Historical satellite imagery browser with timeline slider, 3D terrain, and measurement tools — the primary platform for geolocation verification and change detection.
historical imagerygeolocation
Current satellite and Street View imagery with distance measurement tools — use Street View for ground-truth verification of structures and terrain.
street viewcurrent imagery
Often provides higher-resolution or more current imagery than Google in specific regions, with a Bird's Eye oblique view that reveals structural details invisible from overhead.
aerial imageryoblique view
ESA Copernicus Sentinel multispectral data with near-daily revisit — used for monitoring conflict burn scars, environmental damage, and industrial activity.
multispectralchange detection
EU Copernicus Data Space with Sentinel-1 SAR imagery — penetrates cloud cover to enable all-weather, day-and-night monitoring.
SARall-weather
Crowdsourced street-level imagery from around the world — often more current and geographically diverse than Google Street View.
street levelcrowdsourced
3D mountain and terrain identification tool for matching peaks and ridgelines in imagery to pinpoint exact location — powerful for conflict zones in mountainous terrain.
terrain IDmountains
Near real-time fire and thermal anomaly data from MODIS and VIIRS satellites — used to track shelling burn signatures, industrial fires, and refinery strikes.
thermal anomalyconflict monitoring
Commercial satellite imagery provider releasing high-resolution data for humanitarian, research, and journalism use — a strong complement to Sentinel for crisis monitoring.
commercialopen data
TransportTransportation Trackers7 tools
The primary open-source maritime vessel tracker with real-time and historical AIS data — essential for sanctions evasion monitoring and shadow fleet tracking.
AISvesselssanctions
Alternative AIS vessel tracker — cross-reference against MarineTraffic to identify AIS spoofing and dark shipping patterns.
AISspoofing detection
Complementary vessel tracker with strong port call histories — triangulate with MarineTraffic and VesselFinder for comprehensive route reconstruction.
port callsroute history
Real-time and historical ADS-B flight tracking for civilian, private, and government aircraft — used to track ISR aircraft, VIP movements, and military-adjacent aviation.
ADS-Breal-time
Unfiltered ADS-B tracker that does not honour suppression requests — the definitive resource for tracking sensitive military and government aircraft.
unfilteredmilitary
Aviation tracking with deep historical playback for reconstructing complete flight paths and correlating aircraft positions with ground events.
historical playbackflight paths
Satellite orbital data and real-time tracking — identify which imagery satellites are overhead at a given location and time to assess collection windows.
satellite orbitcollection windows
Open ChatterOpen Chatter3 tools
Comprehensive database of radio frequencies, trunked systems, and live scanner feeds for identifying communication infrastructure and monitoring public emergency radio traffic.
radio frequenciesscanner feeds
Browser-based access to Software Defined Radio receivers worldwide — listen to HF, VHF, and UHF frequencies globally without any hardware.
SDRlive radioglobal
Telegram channel statistics, search, and analytics — critical for monitoring Russian-language information operations, conflict reporting, and channel networks.
TelegramRussia/CIS
Social MediaSocial Media & Human Investigations8 tools
Operator-based search across X/Twitter filtering by date, account, language, and keywords — the primary platform for real-time OSINT collection during breaking events.
search operatorsreal-time
Internet Archive's web snapshot database for recovering deleted pages, profile data, and documents — essential for building historical identity timelines.
web archivedeleted content
Checks username existence across hundreds of platforms simultaneously — rapidly builds cross-platform identity profiles with no installation required.
usernamecross-platform
Command-line tool hunting for usernames across 300+ social networks — more comprehensive than browser-based alternatives for deep profiling operations.
username huntCLI
Increasingly a primary source of conflict user-generated content — search by keyword, hashtag, and location for eyewitness footage in areas with limited media coverage.
UGCvideoeyewitness
Checks whether an email address appears in known data breaches — confirms address validity and reveals platforms a subject has registered on.
emailbreach
Browse geotagged posts by location to find user-generated content anchored to specific places — effective for confirming activity at sites of interest.
locationgeotagged UGC
Instagram OSINT tool for searching profiles, hashtags, and locations — helps surface accounts, map networks, and aggregate publicly available Instagram data.
Instagramprofile search
CorporateCorporate, Financial & Open Databases9 tools
The world's largest open company database with 200M+ entities from 130+ jurisdictions — the starting point for any corporate ownership investigation.
UBOshell companiesglobal
Aggregated sanctions and Politically Exposed Persons database consolidating OFAC, EU, UN, and 100+ national lists into a single searchable resource.
sanctionsPEP
U.S. Treasury's Specially Designated Nationals list — check individuals, companies, and vessels against active US sanctions.
US sanctionsSDN
UK company registry with full beneficial ownership disclosure and free filing access — one of the most transparent corporate registries globally.
UKbeneficial ownership
Domain registration lookup for identifying registrar, registration date, and name server data — useful for mapping influence operation infrastructure.
WHOISdomain
Searchable database from Panama Papers, Pandora Papers, Paradise Papers, and FinCEN Files — search individuals and companies across leaked offshore financial records from 80+ countries.
Panama PapersPandora Papers
OCCRP's investigative data platform aggregating company registries, court records, sanctions lists, and leaked datasets from 200+ sources.
investigative200+ sources
The Global Investigative Journalism Network's curated and regularly updated directory of data journalism and OSINT tools used by practitioners worldwide.
journalismdirectory
Global map of beneficial ownership transparency — links to national registries and indicates which countries publish open beneficial ownership data, useful for corporate investigation scoping.
beneficial ownershipglobal registries
Data VizData Visualisation & Analysis4 tools
Open-source network analysis and visualisation platform for building interactive node-edge graphs — used in Knowmad for corporate ownership mapping and influence network analysis.
network analysisgraph
Social network analysis plugin for Microsoft Excel — maps Twitter/X and platform networks to visualise influence patterns and coordination behaviour.
social networkExcel
No-code platform for publication-ready charts, maps, and network diagrams — used by newsrooms and Knowmad to produce interactive intelligence visualisations.
no-codechartsmaps
Web-based interactive timeline builder for producing shareable event chronologies in intelligence products and investigative reporting.
timelinechronology
OPSECOperational Security & Digital Safety3 tools
Privacy-first VPN from the makers of ProtonMail — open-source, no-logs, and trusted by journalists and researchers for secure, anonymous collection operations.
VPNno-logs
End-to-end encrypted messaging — the industry standard for secure communications with sources, colleagues, and editorial teams during sensitive investigations.
encryptedmessaging
Strips metadata from documents, images, and files before sharing — prevents inadvertent exposure of author identity and location data embedded in file metadata.
metadata removalprivacy

Want structured OSINT training?

This toolkit is a companion to the Knowmad OSINT Instructor-Guided Self-Paced Program (IGSP) and bespoke trainings — instructor-guided, with 1:1 coaching, tutorials, no "AI slop," real assignments and tailored feedback, and a certificate upon completion. Trusted by 500+ career starters and professionals.

Individuals: Request Brochure → Organizations: Request Consultation
Third-Party Tools — Disclaimer
All tools and resources listed on this page are third-party products and services operated independently of Knowmad OSINT LLC. Links are provided for informational and educational purposes only. Knowmad OSINT does not endorse, control, maintain, or take responsibility for the accuracy, availability, security, privacy practices, or continued operation of any third-party tool listed here. Use of any external tool is at your own discretion and risk. Knowmad OSINT accepts no liability for any harm, data loss, security incident, or other consequence arising from the use of tools or resources linked from this page. Tool availability and functionality may change without notice.